What were you trying to do that didn't work?

Running some npm commands results in a message that npm is out of date and suggests running a command that updates npm outside of dnf.

Please provide the package NVR for which bug is seen:

• nodejs-16.20.2-3.el9
• nodejs-1:18.14.2-2.module_el9+307+7e5e4074 (also nodejs-18.17.1-1.el9 built from https://gitlab.com/redhat/centos-stream/rpms/nodejs/-/tree/stream-nodejs-18-rhel-9.3.0)
• nodejs-1:20.9.0-1.module_el9+743+ad38546c

How reproducible:

Depends on drift between the RPM packaged version of npm and the latest version on https://registry.npmjs.org/npm.

Steps to reproduce

1. (optional) dnf module enable -y nodejs:<version>
2. dnf install -y nodejs
3. mkdir -p /tmp/test-pkg
4. cd /tmp/test-pkg/
5. npm install omg-i-pass # or any npm package

Expected results

added 1 package, and audited 2 packages in 336ms

found 0 vulnerabilities

i.e. no warning if the RPM is the latest available from the appstream repository.

Actual results

added 1 package, and audited 2 packages in 458ms

found 0 vulnerabilities
npm notice
npm notice New major version of npm available! 8.19.4 -> 10.2.5
npm notice Changelog: https://github.com/npm/cli/releases/tag/v10.2.5
npm notice Run npm install -g npm@10.2.5 to update!
npm notice